CVE-2023-45335: Online Food Ordering System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Published Nov 2, 2023

Updated

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Affected Software

1 affected component

Projectworlds Online Food Ordering System=1.0

Event History

Nov 2, 2023

CVE Published

01:25 PM

Rejected

01:25 PM

Data Sourced

via NVD·02:15 PM

Description

Frequently Asked Questions

What is CVE-2023-45335?

CVE-2023-45335 is a vulnerability in the Online Food Ordering System v1.0 that allows multiple unauthenticated SQL injections.

What is the severity of CVE-2023-45335?

CVE-2023-45335 has a severity level of critical with a score of 9.8.

How does CVE-2023-45335 affect the Online Food Ordering System?

CVE-2023-45335 affects the Online Food Ordering System v1.0 by allowing unauthenticated users to perform SQL injections.

How can I fix the CVE-2023-45335 vulnerability?

To fix the CVE-2023-45335 vulnerability, it is recommended to validate and sanitize user inputs in the 'id' parameter of the routers/edit-orders.php resource to prevent SQL injections.

Where can I find more information about CVE-2023-45335?

You can find more information about CVE-2023-45335 on the Fluid Attacks advisory page (https://fluidattacks.com/advisories/hann) and the Projectworlds website (https://projectworlds.in/).